Privacy Policy

Last updated: 26th August 2026

1. Introduction

Riverstone Dyslexia Learning operates Riverstone Quest including The Boathouse. This Privacy Policy sets out how we handle your personal information when you register for or purchase courses hosted on our Riverstone Quest platform. We respect your privacy and are committed to protecting your personal data in compliance with UK GDPR and the UK Data Protection Act 2018.

2. Data Controller and Data Processor

Riverstone Dyslexia Learning (trading as Riverstone Quest) is the Data Controller for the personal information processed in connection with our courses.

3. Personal Data Collected

When you register, create an account or complete a purchase, Stripe processes personal data on behalf of Riverstone Quest, including:

• Contact Information: Name, email address and billing address.
• Transaction Data: Details of payments made. (Note: Financial card details are processed directly by secure third party payment providers such as Stripe or PayPal and are never stored directly by us.)
• Usage Data: Information about how you use and progress through our courses and activities.

4. How We Use Your Personal Data

Stripe and Riverstone Quest process your personal data to:

• Deliver, manage and maintain access to your course materials.
• Process orders, payments and send purchase receipts.
• Communicate essential course updates, technical notifications and account support.

5. International Data Transfers

We use Stripe to process online payments and manage financial transactions. When you make a purchase, your payment data (such as card details, billing address, and transaction amounts) is collected and processed by Stripe. While Stripe operates local entities for compliance, please note that Stripe is a global platform and processes personal data internationally including transferring data to Stripe, LLC in the United States and other global affiliates. These international transfers are safeguarded in compliance with UK GDPR through legally approved mechanisms, such as the UK Extension to the EU-U.S. Data Privacy Framework (UK/US Data Bridge) and standard contractual clauses. For more information on how Stripe handles your data and your privacy rights, please review Stripe's privacy policy at https://stripe.com/privacy.

6. Data Retention and Security

We and our platform provider maintain appropriate technical and organisational measures to safeguard your personal data. Personal data is retained only for as long as necessary to fulfil the purposes for which it was collected or as required by law.

7. Your Legal Rights

Under UK data protection law, you have rights regarding your personal data, including:

• The right to request access to your personal data.
• The right to request correction of inaccurate data.
• The right to request erasure of your personal data.
• The right to object to or restrict the processing of your personal data.

To exercise any of these rights, please contact us at info@riverstone-quest.co.uk.

8. Right to Complain

You have the right to make a complaint at any time to the Information Commissioner's Office (ICO), the UK supervisory authority for data protection issues (www.ico.org.uk). We would appreciate the opportunity to deal with your concerns before you approach the ICO, so please contact us in the first instance at info@riverstone-quest.co.uk.